@kusinta/iot-schema 0.2.0-beta.1 → 0.2.0-beta.3

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@kusinta/iot-schema",
-  "version": "0.2.0-beta.1",
+  "version": "0.2.0-beta.3",
   "type": "module",
   "license": "MIT",
   "files": ["src"],
@@ -27,7 +27,11 @@
     "./connector/service":      "./src/kusinta/iot/connector/v1/connector_service_pb.js",
     "./webrtc":                 "./src/kusinta/iot/webrtc/v1/envelope_pb.js",
     "./webrtc/app-token":       "./src/kusinta/iot/webrtc/v1/app_token_pb.js",
+    "./webrtc/command":         "./src/kusinta/iot/webrtc/v1/command_pb.js",
+    "./webrtc/device-state":    "./src/kusinta/iot/webrtc/v1/device_state_pb.js",
     "./webrtc/management":      "./src/kusinta/iot/webrtc/v1/management_pb.js",
+    "./webrtc/permission-push": "./src/kusinta/iot/webrtc/v1/permission_push_pb.js",
+    "./webrtc/setpoint-mode":   "./src/kusinta/iot/webrtc/v1/setpoint_mode_pb.js",
     "./registration":           "./src/kusinta/iot/registration/v1/registration_pb.js",
     "./registration/service":   "./src/kusinta/iot/registration/v1/registration_service_pb.js",
     "./signaling":              "./src/kusinta/iot/signaling/v1/signaling_pb.js",

package/src/kusinta/iot/access/v1/acl_pb.d.ts

@@ -86,6 +86,77 @@ export declare type AttributeRef = Message<"kusinta.iot.access.v1.AttributeRef">
  */
 export declare const AttributeRefSchema: GenMessage<AttributeRef>;
 
+/**
+ * CommandRef names one command on one endpoint, for DeviceAcl.allowed_command_refs.
+ *
+ * A separate type from AttributeRef because attributes and commands are numbered
+ * independently within a cluster: On/Off (0x0006) has an attribute 0x0000 (OnOff) and a
+ * command 0x0000 (Off) that have nothing to do with each other. Putting a command ID in a
+ * field named attribute_id would be the same class of ambiguity this schema removed when
+ * it made addressing numeric.
+ *
+ * @generated from message kusinta.iot.access.v1.CommandRef
+ */
+export declare type CommandRef = Message<"kusinta.iot.access.v1.CommandRef"> & {
+  /**
+   * @generated from field: uint32 cluster_id = 1;
+   */
+  clusterId: number;
+
+  /**
+   * @generated from field: uint32 matter_command_id = 2;
+   */
+  matterCommandId: number;
+
+  /**
+   * Which endpoint. Required on a grant, for the same reason as AttributeRef.endpoint_id:
+   * all four channels of a 4-channel actuator accept the same command on the same cluster,
+   * so a ref without one cannot tell channel 1 from channel 3.
+   *
+   * @generated from field: optional uint32 endpoint_id = 3;
+   */
+  endpointId?: number | undefined;
+};
+
+/**
+ * Describes the message kusinta.iot.access.v1.CommandRef.
+ * Use `create(CommandRefSchema)` to create a new message.
+ */
+export declare const CommandRefSchema: GenMessage<CommandRef>;
+
+/**
+ * EventRef names one event on one endpoint, for DeviceAcl.allowed_event_refs.
+ *
+ * Events are numbered independently of attributes and commands within a cluster, so this
+ * is a third type rather than a reuse. On Door Lock (0x0101), the LockState attribute and
+ * the lock-operation event are different elements answering different questions: what the
+ * lock's state is, and who changed it.
+ *
+ * @generated from message kusinta.iot.access.v1.EventRef
+ */
+export declare type EventRef = Message<"kusinta.iot.access.v1.EventRef"> & {
+  /**
+   * @generated from field: uint32 cluster_id = 1;
+   */
+  clusterId: number;
+
+  /**
+   * @generated from field: uint32 event_id = 2;
+   */
+  eventId: number;
+
+  /**
+   * @generated from field: optional uint32 endpoint_id = 3;
+   */
+  endpointId?: number | undefined;
+};
+
+/**
+ * Describes the message kusinta.iot.access.v1.EventRef.
+ * Use `create(EventRefSchema)` to create a new message.
+ */
+export declare const EventRefSchema: GenMessage<EventRef>;
+
 /**
  * PropertyConstraint bounds a single Matter cluster attribute.
  * MaxHeatSetpointLimit and MinHeatSetpointLimit are actual Matter Thermostat cluster
@@ -155,6 +226,14 @@ export declare type DeviceAcl = Message<"kusinta.iot.access.v1.DeviceAcl"> & {
   userId?: UserId | undefined;
 
   /**
+   * The user's role AS RESOLVED FOR THIS DEVICE. A gateway-wide role is a ceiling on the
+   * kinds of action a user may perform; reach — which devices — is decided separately by
+   * filing. This field is what the two produced together for this one device, so it may
+   * differ from any single role the user's token carries. See roles.proto.
+   *
+   * Descriptive. allowed_actions and the ref lists below are what a consumer enforces
+   * against; this says which relationship produced them.
+   *
    * @generated from field: kusinta.iot.access.v1.Role role = 3;
    */
   role: Role;
@@ -192,6 +271,39 @@ export declare type DeviceAcl = Message<"kusinta.iot.access.v1.DeviceAcl"> & {
    * @generated from field: repeated kusinta.iot.access.v1.PropertyConstraint property_constraints = 6;
    */
   propertyConstraints: PropertyConstraint[];
+
+  /**
+   * Narrows PERMISSION_ACTION_INVOKE to particular commands. Empty = every command the
+   * device accepts, matching allowed_attribute_refs — it is a filter, and an empty filter
+   * narrows nothing. It grants nothing on its own: without INVOKE in allowed_actions, no
+   * command is permitted however this list reads.
+   *
+   * Without it INVOKE is all-or-nothing, and that is the operation that moves hardware —
+   * a grant covering a thermostat setpoint would equally cover UnlockDoor on a device
+   * exposing both.
+   *
+   * A ref present with no endpoint_id is INVALID and MUST be rejected.
+   *
+   * @generated from field: repeated kusinta.iot.access.v1.CommandRef allowed_command_refs = 9;
+   */
+  allowedCommandRefs: CommandRef[];
+
+  /**
+   * Which events this user may receive. Empty = NONE.
+   *
+   * The opposite default to the two lists above, deliberately. Attributes and commands are
+   * a device's operating surface; events are its journal, and a journal discloses who did
+   * what and when. Reaching that must be an explicit grant, never something a user gets by
+   * holding SUBSCRIBE for ordinary readings.
+   *
+   * Requires PERMISSION_ACTION_SUBSCRIBE as well: the action says a standing stream is
+   * permitted, this list says which events travel on it.
+   *
+   * A ref present with no endpoint_id is INVALID and MUST be rejected.
+   *
+   * @generated from field: repeated kusinta.iot.access.v1.EventRef allowed_event_refs = 10;
+   */
+  allowedEventRefs: EventRef[];
 };
 
 /**
@@ -201,6 +313,24 @@ export declare type DeviceAcl = Message<"kusinta.iot.access.v1.DeviceAcl"> & {
 export declare const DeviceAclSchema: GenMessage<DeviceAcl>;
 
 /**
+ * Every DeviceAcl in force for one user on one gateway, at valid_at.
+ *
+ * ADVISORY WHEN SENT TO AN APP. The gateway is the sole authority and enforces every
+ * read, write, invoke and subscription against its own copy, whether or not the app has
+ * one. This is disclosed so an app can RENDER honestly — grey out a control the user may
+ * not invoke, clamp a setpoint slider to a PropertyConstraint, hide a device — instead of
+ * offering an action and discovering the refusal.
+ *
+ * Two mistakes this exists to prevent. An app MUST still handle refusal: this snapshot can
+ * be stale, and it is not a promise. A gateway MUST NOT treat having sent it as having
+ * enforced anything.
+ *
+ * It discloses only the recipient's own permissions. It says nothing about what any other
+ * user holds.
+ *
+ * Sent whole rather than as a delta, in webrtc.v1.DeviceStateSnapshot at connect and in
+ * webrtc.v1.LivePermissionUpdate when it changes.
+ *
  * @generated from message kusinta.iot.access.v1.EffectivePermissions
  */
 export declare type EffectivePermissions = Message<"kusinta.iot.access.v1.EffectivePermissions"> & {

package/src/kusinta/iot/access/v1/acl_pb.js

@@ -11,7 +11,7 @@ import { file_kusinta_iot_access_v1_roles } from "./roles_pb.js";
  * Describes the file kusinta/iot/access/v1/acl.proto.
  */
 export const file_kusinta_iot_access_v1_acl = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_access_v1_roles]);
+  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_access_v1_roles]);
 
 /**
  * Describes the message kusinta.iot.access.v1.AttributeRef.
@@ -20,24 +20,38 @@ export const file_kusinta_iot_access_v1_acl = /*@__PURE__*/
 export const AttributeRefSchema = /*@__PURE__*/
   messageDesc(file_kusinta_iot_access_v1_acl, 0);
 
+/**
+ * Describes the message kusinta.iot.access.v1.CommandRef.
+ * Use `create(CommandRefSchema)` to create a new message.
+ */
+export const CommandRefSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_access_v1_acl, 1);
+
+/**
+ * Describes the message kusinta.iot.access.v1.EventRef.
+ * Use `create(EventRefSchema)` to create a new message.
+ */
+export const EventRefSchema = /*@__PURE__*/
+  messageDesc(file_kusinta_iot_access_v1_acl, 2);
+
 /**
  * Describes the message kusinta.iot.access.v1.PropertyConstraint.
  * Use `create(PropertyConstraintSchema)` to create a new message.
  */
 export const PropertyConstraintSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_access_v1_acl, 1);
+  messageDesc(file_kusinta_iot_access_v1_acl, 3);
 
 /**
  * Describes the message kusinta.iot.access.v1.DeviceAcl.
  * Use `create(DeviceAclSchema)` to create a new message.
  */
 export const DeviceAclSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_access_v1_acl, 2);
+  messageDesc(file_kusinta_iot_access_v1_acl, 4);
 
 /**
  * Describes the message kusinta.iot.access.v1.EffectivePermissions.
  * Use `create(EffectivePermissionsSchema)` to create a new message.
  */
 export const EffectivePermissionsSchema = /*@__PURE__*/
-  messageDesc(file_kusinta_iot_access_v1_acl, 3);
+  messageDesc(file_kusinta_iot_access_v1_acl, 5);
 

package/src/kusinta/iot/access/v1/roles_pb.d.ts

@@ -10,6 +10,32 @@ import type { GenEnum, GenFile } from "@bufbuild/protobuf/codegenv2";
 export declare const file_kusinta_iot_access_v1_roles: GenFile;
 
 /**
+ * What kind of party a user is, gateway-wide.
+ *
+ * A role is a CEILING on the kinds of action a user may perform anywhere on this gateway.
+ * It is not reach: it says nothing about WHICH devices the user may act on. Reach is
+ * decided by filing — which spaces the user holds, and which devices are in them — and
+ * the two are independent. A role must never be read as reach, and reach must never be
+ * read as permission to act.
+ *
+ * The gateway resolves the two together into DeviceAcl.allowed_actions, per device. A
+ * role narrows what may appear there; it does not put anything there on its own.
+ *
+ * Carried in the app's token as webrtc.v1.AppTokenClaims.roles, as an array of proto3
+ * canonical enum NAME strings (e.g. ["ROLE_RESIDENT", "ROLE_GATEWAY_ADMIN"]) rather than
+ * integers, so the claim stays self-describing. A user may hold several at once and the
+ * effective ceiling is their union.
+ *
+ * UNORDERED. These are categories, not levels: a technician is not "more than" a
+ * resident, and there is no >= comparison to make between them. Anything needing a graded
+ * comparison — Matter's View/Operate/Manage/Administer, say — would be a separate concept
+ * and is deliberately not modelled here.
+ *
+ * A role is a ceiling rather than a floor, so it may be WIDENED per device by facts the
+ * role does not know: a user who owns a device may hold actions on it that their
+ * gateway-wide role alone would not grant. That widening is the gateway's to apply and is
+ * visible to the app only in the resolved DeviceAcl.
+ *
  * @generated from enum kusinta.iot.access.v1.Role
  */
 export enum Role {
@@ -19,21 +45,31 @@ export enum Role {
   UNSPECIFIED = 0,
 
   /**
+   * Lives with the devices. Operates what is in the spaces they hold.
+   *
    * @generated from enum value: ROLE_RESIDENT = 1;
    */
   RESIDENT = 1,
 
   /**
+   * Owns the property the devices are installed in. Sets the bounds residents operate
+   * within — see PropertyConstraint in acl.proto.
+   *
    * @generated from enum value: ROLE_PROPERTY_OWNER = 2;
    */
   PROPERTY_OWNER = 2,
 
   /**
+   * Installs and services devices. Present for the work, not for the tenancy.
+   *
    * @generated from enum value: ROLE_TECHNICIAN = 3;
    */
   TECHNICIAN = 3,
 
   /**
+   * Administers this gateway itself. The one role that also affects reach: some devices
+   * are visible only to a session holding it.
+   *
    * @generated from enum value: ROLE_GATEWAY_ADMIN = 4;
    */
   GATEWAY_ADMIN = 4,
@@ -49,6 +85,12 @@ export declare const RoleSchema: GenEnum<Role>;
  * names an operation that exists on the app leg, so a grant can be checked against the
  * message that arrived.
  *
+ * The action says HOW data is reached. WHICH elements it reaches is a separate question,
+ * answered by the ref lists on DeviceAcl — allowed_attribute_refs, allowed_command_refs
+ * and allowed_event_refs. Keeping the two apart is deliberate: attributes, commands and
+ * events are addressed by three different ID spaces, and folding "which kind of element"
+ * into the action verb would make the action mean two things at once.
+ *
  * @generated from enum kusinta.iot.access.v1.PermissionAction
  */
 export enum PermissionAction {
@@ -64,37 +106,61 @@ export enum PermissionAction {
   UNSPECIFIED = 0,
 
   /**
-   * Read an attribute once, on demand: webrtc.v1.PropertyReadRequest.
+   * Read an element once, on demand: webrtc.v1.PropertyReadRequest.
    *
    * @generated from enum value: PERMISSION_ACTION_READ = 1;
    */
   READ = 1,
 
   /**
-   * Write an attribute directly.
+   * Write an attribute to a value: webrtc.v1.AttributeWriteRequest, carried on
+   * AppMessage.attribute_write and forwarded to a connector as
+   * SessionResponse.execute_attribute_write.
+   *
+   * MUST be enforced separately from INVOKE. Writing an attribute and invoking a command
+   * are different operations in Matter carrying different authority: a user who may
+   * toggle a light is not thereby a user who may rewrite its attributes. An earlier form
+   * of this schema routed an absolute setpoint through DeviceCommand, which made INVOKE
+   * imply WRITE and left the distinction unenforceable — that is the mistake
+   * AttributeWriteRequest exists to undo, and checking INVOKE for a write would reinstate
+   * it.
    *
-   * NOTE: no message on the app leg does this. AppMessage carries handshake, command,
-   * read_request, ping, subscribe, unsubscribe and management — nothing that writes an
-   * attribute, so the only thing that changes a device is a DeviceCommand, which is
-   * INVOKE. This value therefore authorizes an operation that does not yet exist. It is
-   * kept rather than reserved because a direct attribute write is a plausible addition
-   * and burning the number would gain nothing; until then, granting it grants nothing.
+   * A relative adjust is NOT a write. Thermostat SetpointRaiseLower is a genuine Matter
+   * command and needs INVOKE; setting an absolute value needs WRITE.
    *
    * @generated from enum value: PERMISSION_ACTION_WRITE = 2;
    */
   WRITE = 2,
 
   /**
-   * Receive attribute changes as they happen: webrtc.v1.AppMessage.subscribe and the
-   * DevicePropertyEvent stream that follows. Distinct from READ — observing is a standing
-   * interest in a device, not a single question about it.
+   * Hold a standing stream of a device's reports: webrtc.v1.AppMessage.subscribe, and the
+   * PropertyReport and DeviceEventBatch that follow.
    *
-   * @generated from enum value: PERMISSION_ACTION_OBSERVE = 3;
+   * Covers BOTH attribute reports and events, as a Matter subscription does — one
+   * subscription carries attribute paths and event paths together. Which of them actually
+   * arrives is decided by allowed_attribute_refs and allowed_event_refs, not by this
+   * action. Note their emptiness rules differ: attributes default to all, events to none.
+   *
+   * NOT a privacy boundary. Anyone who may READ an element can poll it, so withholding
+   * SUBSCRIBE while granting READ hides nothing — it only costs the app round trips. Treat
+   * it as a RESOURCE control: bandwidth, battery, and how many standing streams a gateway
+   * will carry. Do not use it to protect data; use the ref lists for that.
+   *
+   * Was PERMISSION_ACTION_OBSERVE. Renamed because "observe" reads as a kind of access
+   * distinct from reading, which it is not — it is the same access held open.
+   *
+   * @generated from enum value: PERMISSION_ACTION_SUBSCRIBE = 3;
    */
-  OBSERVE = 3,
+  SUBSCRIBE = 3,
 
   /**
-   * Send a webrtc.v1.DeviceCommand. This is the action that moves hardware.
+   * Invoke a command on a cluster: webrtc.v1.DeviceCommand. This is the action that moves
+   * hardware.
+   *
+   * Commands are named by (cluster_id, matter_command_id), a different ID space from
+   * attributes — On/Off cluster 0x0006 has an attribute 0x0000 and a command 0x0000 that
+   * are unrelated. So allowed_attribute_refs cannot narrow this; allowed_command_refs is
+   * what does.
    *
    * @generated from enum value: PERMISSION_ACTION_INVOKE = 4;
    */

package/src/kusinta/iot/access/v1/roles_pb.js

@@ -8,7 +8,7 @@ import { enumDesc, fileDesc, tsEnum } from "@bufbuild/protobuf/codegenv2";
  * Describes the file kusinta/iot/access/v1/roles.proto.
  */
 export const file_kusinta_iot_access_v1_roles = /*@__PURE__*/
-  fileDesc("CiFrdXNpbnRhL2lvdC9hY2Nlc3MvdjEvcm9sZXMucHJvdG8SFWt1c2ludGEuaW90LmFjY2Vzcy52MSp1CgRSb2xlEhQKEFJPTEVfVU5TUEVDSUZJRUQQABIRCg1ST0xFX1JFU0lERU5UEAESFwoTUk9MRV9QUk9QRVJUWV9PV05FUhACEhMKD1JPTEVfVEVDSE5JQ0lBThADEhYKElJPTEVfR0FURVdBWV9BRE1JThAEKqsBChBQZXJtaXNzaW9uQWN0aW9uEiEKHVBFUk1JU1NJT05fQUNUSU9OX1VOU1BFQ0lGSUVEEAASGgoWUEVSTUlTU0lPTl9BQ1RJT05fUkVBRBABEhsKF1BFUk1JU1NJT05fQUNUSU9OX1dSSVRFEAISHQoZUEVSTUlTU0lPTl9BQ1RJT05fT0JTRVJWRRADEhwKGFBFUk1JU1NJT05fQUNUSU9OX0lOVk9LRRAEQgJIAWIGcHJvdG8z");
+  fileDesc("CiFrdXNpbnRhL2lvdC9hY2Nlc3MvdjEvcm9sZXMucHJvdG8SFWt1c2ludGEuaW90LmFjY2Vzcy52MSp1CgRSb2xlEhQKEFJPTEVfVU5TUEVDSUZJRUQQABIRCg1ST0xFX1JFU0lERU5UEAESFwoTUk9MRV9QUk9QRVJUWV9PV05FUhACEhMKD1JPTEVfVEVDSE5JQ0lBThADEhYKElJPTEVfR0FURVdBWV9BRE1JThAEKq0BChBQZXJtaXNzaW9uQWN0aW9uEiEKHVBFUk1JU1NJT05fQUNUSU9OX1VOU1BFQ0lGSUVEEAASGgoWUEVSTUlTU0lPTl9BQ1RJT05fUkVBRBABEhsKF1BFUk1JU1NJT05fQUNUSU9OX1dSSVRFEAISHwobUEVSTUlTU0lPTl9BQ1RJT05fU1VCU0NSSUJFEAMSHAoYUEVSTUlTU0lPTl9BQ1RJT05fSU5WT0tFEARCAkgBYgZwcm90bzM");
 
 /**
  * Describes the enum kusinta.iot.access.v1.Role.
@@ -17,6 +17,32 @@ export const RoleSchema = /*@__PURE__*/
   enumDesc(file_kusinta_iot_access_v1_roles, 0);
 
 /**
+ * What kind of party a user is, gateway-wide.
+ *
+ * A role is a CEILING on the kinds of action a user may perform anywhere on this gateway.
+ * It is not reach: it says nothing about WHICH devices the user may act on. Reach is
+ * decided by filing — which spaces the user holds, and which devices are in them — and
+ * the two are independent. A role must never be read as reach, and reach must never be
+ * read as permission to act.
+ *
+ * The gateway resolves the two together into DeviceAcl.allowed_actions, per device. A
+ * role narrows what may appear there; it does not put anything there on its own.
+ *
+ * Carried in the app's token as webrtc.v1.AppTokenClaims.roles, as an array of proto3
+ * canonical enum NAME strings (e.g. ["ROLE_RESIDENT", "ROLE_GATEWAY_ADMIN"]) rather than
+ * integers, so the claim stays self-describing. A user may hold several at once and the
+ * effective ceiling is their union.
+ *
+ * UNORDERED. These are categories, not levels: a technician is not "more than" a
+ * resident, and there is no >= comparison to make between them. Anything needing a graded
+ * comparison — Matter's View/Operate/Manage/Administer, say — would be a separate concept
+ * and is deliberately not modelled here.
+ *
+ * A role is a ceiling rather than a floor, so it may be WIDENED per device by facts the
+ * role does not know: a user who owns a device may hold actions on it that their
+ * gateway-wide role alone would not grant. That widening is the gateway's to apply and is
+ * visible to the app only in the resolved DeviceAcl.
+ *
  * @generated from enum kusinta.iot.access.v1.Role
  */
 export const Role = /*@__PURE__*/
@@ -33,6 +59,12 @@ export const PermissionActionSchema = /*@__PURE__*/
  * names an operation that exists on the app leg, so a grant can be checked against the
  * message that arrived.
  *
+ * The action says HOW data is reached. WHICH elements it reaches is a separate question,
+ * answered by the ref lists on DeviceAcl — allowed_attribute_refs, allowed_command_refs
+ * and allowed_event_refs. Keeping the two apart is deliberate: attributes, commands and
+ * events are addressed by three different ID spaces, and folding "which kind of element"
+ * into the action verb would make the action mean two things at once.
+ *
  * @generated from enum kusinta.iot.access.v1.PermissionAction
  */
 export const PermissionAction = /*@__PURE__*/

package/src/kusinta/iot/connector/v1/connector_pb.d.ts

@@ -8,9 +8,9 @@ import type { ConnectorId, DeviceId, GatewayId } from "../../identity/v1/identit
 import type { ConnectorTransport } from "../../common/v1/types_pb.js";
 import type { Device } from "../../device/v1/device_pb.js";
 import type { Timestamp } from "@bufbuild/protobuf/wkt";
+import type { AttributeWriteRequest, CommandError, DeviceCommand } from "../../webrtc/v1/command_pb.js";
 import type { PropertyUpdateBatch } from "../../device/v1/property_update_pb.js";
 import type { DeviceEventBatch } from "../../device/v1/device_event_pb.js";
-import type { AttributeWriteRequest, DeviceCommand } from "../../webrtc/v1/command_pb.js";
 
 /**
  * Describes the file kusinta/iot/connector/v1/connector.proto.
@@ -196,6 +196,15 @@ export declare type UnsubscribeDevice = Message<"kusinta.iot.connector.v1.Unsubs
 export declare const UnsubscribeDeviceSchema: GenMessage<UnsubscribeDevice>;
 
 /**
+ * Session-level error, gateway → connector. NOT how a command or a write fails: that is
+ * an ordinary ConnectorCommandResult with success = false and a typed CommandError, and
+ * one operation failing says nothing about the session, which continues.
+ *
+ * code stays a free-form string here, unlike webrtc.v1.GatewayError's closed
+ * GatewayErrorCode and unlike the CommandError below. A connector is versioned on its own
+ * schedule and one may be a third party's, so the set of things that can go wrong between
+ * a gateway and a connector is not closed the way the app leg's is.
+ *
  * @generated from message kusinta.iot.connector.v1.GatewayError
  */
 export declare type GatewayError = Message<"kusinta.iot.connector.v1.GatewayError"> & {
@@ -210,7 +219,7 @@ export declare type GatewayError = Message<"kusinta.iot.connector.v1.GatewayErro
   message: string;
 
   /**
-   * non-empty if the error answers a command or a write
+   * non-empty if the error refers to a specific request
    *
    * @generated from field: string request_id = 3;
    */
@@ -245,14 +254,53 @@ export declare type ConnectorCommandResult = Message<"kusinta.iot.connector.v1.C
   success: boolean;
 
   /**
-   * @generated from field: kusinta.iot.connector.v1.GatewayError error = 3;
+   * @generated from field: google.protobuf.Timestamp completed_at = 4;
    */
-  error?: GatewayError | undefined;
+  completedAt?: Timestamp | undefined;
 
   /**
-   * @generated from field: google.protobuf.Timestamp completed_at = 4;
+   * Why it failed, in the same closed vocabulary the app is eventually given. The gateway
+   * forwards this into webrtc.v1.CommandResult.error unchanged; it does not translate.
+   *
+   * Shared rather than mirrored on purpose. The free-form string this replaces left every
+   * connector to invent its own spellings ("TIMEOUT", "UNSUPPORTED_MODE") and the gateway
+   * to keep a mapping table that silently fell behind whenever a connector coined a new
+   * one — which is the drift a closed vocabulary exists to prevent.
+   *
+   * A connector produces the subset it can actually observe: REJECTED_BY_DEVICE,
+   * UNREACHABLE, TIMEOUT, INVALID_COMMAND, INTERNAL. NOT_ENTITLED and
+   * CONSTRAINT_VIOLATED are the gateway's, decided before a command is forwarded at all;
+   * a connector never sees the caller's permissions and must not claim to.
+   *
+   * Rollout note: a connector whose schema predates this sends nothing on field 5 and the
+   * gateway reads UNSPECIFIED. Set success = false with no code and the meaning is "it
+   * failed, reason unstated" — which is what the string codes amounted to anyway.
+   *
+   * @generated from field: kusinta.iot.webrtc.v1.CommandError error = 5;
    */
-  completedAt?: Timestamp | undefined;
+  error?: CommandError | undefined;
+
+  /**
+   * When this connector's own optimistic window closes: by this time the value has either
+   * been confirmed by the device or restored, and either way the connector will have
+   * published a PropertyUpdate saying so.
+   *
+   * Set it when the connector applied the value optimistically and runs a rollback timer
+   * of its own — a downstream device with a known, device-specific timeout. The gateway
+   * carries it into webrtc.v1.CommandResult.settles_by instead of applying a fixed guess:
+   * the connector is the only party that knows the timer, and a gateway-side constant
+   * chasing it is the same hardcoded-window problem one level up.
+   *
+   * Absent means no claim — either the connector confirms synchronously, or it cannot
+   * state a bound. Absent is NOT "settles immediately", and the gateway is free to fall
+   * back to a deadline of its own when nothing is stated here.
+   *
+   * This bounds the wait; it does not label the values that arrive. Which update was the
+   * optimistic one is device.v1.PropertyUpdate.provenance.
+   *
+   * @generated from field: optional google.protobuf.Timestamp settles_by = 6;
+   */
+  settlesBy?: Timestamp | undefined;
 };
 
 /**

package/src/kusinta/iot/connector/v1/connector_pb.js

@@ -15,7 +15,7 @@ import { file_kusinta_iot_webrtc_v1_command } from "../../webrtc/v1/command_pb.j
  * Describes the file kusinta/iot/connector/v1/connector.proto.
  */
 export const file_kusinta_iot_connector_v1_connector = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_common_v1_types, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_device_v1_device, file_kusinta_iot_device_v1_device_event, file_kusinta_iot_device_v1_property_update, file_kusinta_iot_webrtc_v1_command]);
+  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_common_v1_types, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_device_v1_device, file_kusinta_iot_device_v1_device_event, file_kusinta_iot_device_v1_property_update, file_kusinta_iot_webrtc_v1_command]);
 
 /**
  * Describes the message kusinta.iot.connector.v1.ConnectorInfo.

package/src/kusinta/iot/webrtc/v1/command_pb.d.ts

@@ -4,6 +4,7 @@
 
 import type { GenEnum, GenFile, GenMessage } from "@bufbuild/protobuf/codegenv2";
 import type { Message } from "@bufbuild/protobuf";
+import type { SetpointAdjustMode } from "./setpoint_mode_pb.js";
 import type { DeviceId } from "../../identity/v1/identity_pb.js";
 import type { Timestamp } from "@bufbuild/protobuf/wkt";
 import type { AttributeRef } from "../../access/v1/acl_pb.js";
@@ -28,11 +29,11 @@ export declare const file_kusinta_iot_webrtc_v1_command: GenFile;
  */
 export declare type ThermostatSetpointParams = Message<"kusinta.iot.webrtc.v1.ThermostatSetpointParams"> & {
   /**
-   * SetpointAdjustMode, see above
+   * absent = the producer stated no mode
    *
-   * @generated from field: optional uint32 mode = 1;
+   * @generated from field: optional kusinta.iot.webrtc.v1.SetpointAdjustMode mode = 1;
    */
-  mode?: number | undefined;
+  mode?: SetpointAdjustMode | undefined;
 
   /**
    * centidegrees delta
@@ -147,9 +148,16 @@ export declare const DoorLockParamsSchema: GenMessage<DoorLockParams>;
  *
  * An app MAY send any command; it does not decide whether it is allowed. The gateway
  * authorizes every DeviceCommand against the caller's access.v1.DeviceAcl for the target
- * device before forwarding it to a connector — the command must be permitted by
- * PERMISSION_ACTION_INVOKE, must target an attribute the ACL's allowed_attribute_refs
- * reaches, and must respect any PropertyConstraint bounding the value.
+ * device before forwarding it to a connector: PERMISSION_ACTION_INVOKE must be granted,
+ * and allowed_command_refs must reach this (endpoint, cluster_id, matter_command_id).
+ *
+ * NOT allowed_attribute_refs, and NOT PropertyConstraint. Both name attributes, and a
+ * command is not an attribute — the two are numbered independently within a cluster, so an
+ * attribute ref cannot name a command at all. A constraint bounds an attribute's value;
+ * this message carries command arguments, and ThermostatSetpointParams.amount is a DELTA,
+ * which cannot be compared against a bound without first resolving it to an absolute using
+ * a base the gateway may not hold. Where a setpoint must be bounded, bound the write:
+ * AttributeWriteRequest carries the absolute value a PropertyConstraint can be applied to.
  *
  * A refusal comes back as an ordinary CommandResult with success = false and an error,
  * NOT as a session-level GatewayError: one command being refused says nothing about the

package/src/kusinta/iot/webrtc/v1/command_pb.js

@@ -8,12 +8,13 @@ import { file_kusinta_iot_access_v1_acl } from "../../access/v1/acl_pb.js";
 import { file_kusinta_iot_device_v1_cluster_state } from "../../device/v1/cluster_state_pb.js";
 import { file_kusinta_iot_device_v1_matter_options } from "../../device/v1/matter_options_pb.js";
 import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identity_pb.js";
+import { file_kusinta_iot_webrtc_v1_setpoint_mode } from "./setpoint_mode_pb.js";
 
 /**
  * Describes the file kusinta/iot/webrtc/v1/command.proto.
  */
 export const file_kusinta_iot_webrtc_v1_command = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_acl, file_kusinta_iot_device_v1_cluster_state, file_kusinta_iot_device_v1_matter_options, file_kusinta_iot_identity_v1_identity]);
+  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_acl, file_kusinta_iot_device_v1_cluster_state, file_kusinta_iot_device_v1_matter_options, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_webrtc_v1_setpoint_mode]);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.ThermostatSetpointParams.

package/src/kusinta/iot/webrtc/v1/device_state_pb.d.ts

@@ -44,11 +44,17 @@ export declare type DeviceStateSnapshot = Message<"kusinta.iot.webrtc.v1.DeviceS
 export declare const DeviceStateSnapshotSchema: GenMessage<DeviceStateSnapshot>;
 
 /**
- * Single property change event streamed to the app in real time.
+ * One attribute reading streamed to the app as it happens — Matter's Report Data Action,
+ * for a single attribute.
  *
- * @generated from message kusinta.iot.webrtc.v1.DevicePropertyEvent
+ * Was DevicePropertyEvent. Renamed because it carries a device.v1.PropertyUpdate, which is
+ * STATE, while device.v1.DeviceEvent carries a journal entry. Two messages with "Event" in
+ * the name meaning opposite things is a trap, and this one was never the event: latest
+ * wins, order does not matter, and a missed one is corrected by the next.
+ *
+ * @generated from message kusinta.iot.webrtc.v1.PropertyReport
  */
-export declare type DevicePropertyEvent = Message<"kusinta.iot.webrtc.v1.DevicePropertyEvent"> & {
+export declare type PropertyReport = Message<"kusinta.iot.webrtc.v1.PropertyReport"> & {
   /**
    * @generated from field: kusinta.iot.device.v1.PropertyUpdate update = 1;
    */
@@ -61,10 +67,10 @@ export declare type DevicePropertyEvent = Message<"kusinta.iot.webrtc.v1.DeviceP
 };
 
 /**
- * Describes the message kusinta.iot.webrtc.v1.DevicePropertyEvent.
- * Use `create(DevicePropertyEventSchema)` to create a new message.
+ * Describes the message kusinta.iot.webrtc.v1.PropertyReport.
+ * Use `create(PropertyReportSchema)` to create a new message.
  */
-export declare const DevicePropertyEventSchema: GenMessage<DevicePropertyEvent>;
+export declare const PropertyReportSchema: GenMessage<PropertyReport>;
 
 /**
  * A device appeared while the app was connected — the app leg's counterpart to

package/src/kusinta/iot/webrtc/v1/device_state_pb.js

@@ -13,7 +13,7 @@ import { file_kusinta_iot_identity_v1_identity } from "../../identity/v1/identit
  * Describes the file kusinta/iot/webrtc/v1/device_state.proto.
  */
 export const file_kusinta_iot_webrtc_v1_device_state = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_device_v1_device, file_kusinta_iot_device_v1_property_update, file_kusinta_iot_access_v1_acl, file_kusinta_iot_identity_v1_identity]);
+  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_device_v1_device, file_kusinta_iot_device_v1_property_update, file_kusinta_iot_access_v1_acl, file_kusinta_iot_identity_v1_identity]);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.DeviceStateSnapshot.
@@ -23,10 +23,10 @@ export const DeviceStateSnapshotSchema = /*@__PURE__*/
   messageDesc(file_kusinta_iot_webrtc_v1_device_state, 0);
 
 /**
- * Describes the message kusinta.iot.webrtc.v1.DevicePropertyEvent.
- * Use `create(DevicePropertyEventSchema)` to create a new message.
+ * Describes the message kusinta.iot.webrtc.v1.PropertyReport.
+ * Use `create(PropertyReportSchema)` to create a new message.
  */
-export const DevicePropertyEventSchema = /*@__PURE__*/
+export const PropertyReportSchema = /*@__PURE__*/
   messageDesc(file_kusinta_iot_webrtc_v1_device_state, 1);
 
 /**

package/src/kusinta/iot/webrtc/v1/envelope_pb.d.ts

@@ -9,7 +9,7 @@ import type { AttributeRef } from "../../access/v1/acl_pb.js";
 import type { Space } from "../../space/v1/space_pb.js";
 import type { ManagementAck, ManagementRequest, SpaceTree } from "./management_pb.js";
 import type { Timestamp } from "@bufbuild/protobuf/wkt";
-import type { DeviceAdded, DevicePropertyEvent, DeviceRemoved, DeviceStateSnapshot } from "./device_state_pb.js";
+import type { DeviceAdded, DeviceRemoved, DeviceStateSnapshot, PropertyReport } from "./device_state_pb.js";
 import type { LivePermissionUpdate } from "./permission_push_pb.js";
 import type { AttributeWriteRequest, CommandResult, DeviceCommand } from "./command_pb.js";
 import type { DeviceEventBatch } from "../../device/v1/device_event_pb.js";
@@ -352,10 +352,10 @@ export declare type GatewayMessage = Message<"kusinta.iot.webrtc.v1.GatewayMessa
     case: "stateSnapshot";
   } | {
     /**
-     * @generated from field: kusinta.iot.webrtc.v1.DevicePropertyEvent property_event = 4;
+     * @generated from field: kusinta.iot.webrtc.v1.PropertyReport property_report = 4;
      */
-    value: DevicePropertyEvent;
-    case: "propertyEvent";
+    value: PropertyReport;
+    case: "propertyReport";
   } | {
     /**
      * @generated from field: kusinta.iot.webrtc.v1.LivePermissionUpdate permission_update = 5;

package/src/kusinta/iot/webrtc/v1/envelope_pb.js

@@ -17,7 +17,7 @@ import { file_kusinta_iot_webrtc_v1_permission_push } from "./permission_push_pb
  * Describes the file kusinta/iot/webrtc/v1/envelope.proto.
  */
 export const file_kusinta_iot_webrtc_v1_envelope = /*@__PURE__*/
-  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_acl, file_kusinta_iot_device_v1_device_event, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_space_v1_space, file_kusinta_iot_webrtc_v1_command, file_kusinta_iot_webrtc_v1_device_state, file_kusinta_iot_webrtc_v1_management, file_kusinta_iot_webrtc_v1_permission_push]);
+  fileDesc("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", [file_google_protobuf_timestamp, file_kusinta_iot_access_v1_acl, file_kusinta_iot_device_v1_device_event, file_kusinta_iot_identity_v1_identity, file_kusinta_iot_space_v1_space, file_kusinta_iot_webrtc_v1_command, file_kusinta_iot_webrtc_v1_device_state, file_kusinta_iot_webrtc_v1_management, file_kusinta_iot_webrtc_v1_permission_push]);
 
 /**
  * Describes the message kusinta.iot.webrtc.v1.Ping.

package/src/kusinta/iot/webrtc/v1/setpoint_mode_pb.d.ts

@@ -0,0 +1,63 @@
+// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts,import_extension=js"
+// @generated from file kusinta/iot/webrtc/v1/setpoint_mode.proto (package kusinta.iot.webrtc.v1, syntax proto3)
+/* eslint-disable */
+
+import type { GenEnum, GenFile } from "@bufbuild/protobuf/codegenv2";
+
+/**
+ * Describes the file kusinta/iot/webrtc/v1/setpoint_mode.proto.
+ */
+export declare const file_kusinta_iot_webrtc_v1_setpoint_mode: GenFile;
+
+/**
+ * SetpointAdjustMode selects which setpoint a thermostat command targets. It is
+ * Matter's SetpointRaiseLowerModeEnum (Thermostat cluster 0x0201) and carries Matter's
+ * own numbering.
+ *
+ * A real type rather than a numbering written down in a comment. The mode field on
+ * ThermostatSetpointParams was a bare uint32 with this numbering stated beside it, so a
+ * consumer carrying forward an older Heat=1/Cool=2/Both=3 convention compiled cleanly and
+ * silently reversed which physical behavior a command produced.
+ *
+ * Zero is a real mode, not a "not set" sentinel — which is why there is no
+ * SETPOINT_ADJUST_MODE_UNSPECIFIED, and why every field carrying this value has explicit
+ * presence: absent = the producer stated no mode, present = the mode it named, Heat
+ * included. This is the same rule properties.proto applies to readings, for the same
+ * reason — a bare proto3 scalar makes "meant Heat" and "never set it" identical on the
+ * wire. Renumbering to free zero is not available: the wire value IS Matter's value.
+ *
+ * SetpointAdjustMode is NOT ThermostatProperties.system_mode. system_mode is Matter's
+ * SystemModeEnum (Off=0, Auto=1, Cool=3, Heat=4), a different enum over a different set
+ * of concepts. Cool is 1 here and 3 there; the two must never be substituted for each
+ * other or read through the same mapping table.
+ *
+ * @generated from enum kusinta.iot.webrtc.v1.SetpointAdjustMode
+ */
+export enum SetpointAdjustMode {
+  /**
+   * Targets ThermostatProperties.occupied_heating_setpoint.
+   *
+   * @generated from enum value: SETPOINT_ADJUST_MODE_HEAT = 0;
+   */
+  HEAT = 0,
+
+  /**
+   * Targets ThermostatProperties.occupied_cooling_setpoint.
+   *
+   * @generated from enum value: SETPOINT_ADJUST_MODE_COOL = 1;
+   */
+  COOL = 1,
+
+  /**
+   * Targets both setpoints.
+   *
+   * @generated from enum value: SETPOINT_ADJUST_MODE_BOTH = 2;
+   */
+  BOTH = 2,
+}
+
+/**
+ * Describes the enum kusinta.iot.webrtc.v1.SetpointAdjustMode.
+ */
+export declare const SetpointAdjustModeSchema: GenEnum<SetpointAdjustMode>;
+

package/src/kusinta/iot/webrtc/v1/setpoint_mode_pb.js

@@ -0,0 +1,45 @@
+// @generated by protoc-gen-es v2.12.0 with parameter "target=js+dts,import_extension=js"
+// @generated from file kusinta/iot/webrtc/v1/setpoint_mode.proto (package kusinta.iot.webrtc.v1, syntax proto3)
+/* eslint-disable */
+
+import { enumDesc, fileDesc, tsEnum } from "@bufbuild/protobuf/codegenv2";
+
+/**
+ * Describes the file kusinta/iot/webrtc/v1/setpoint_mode.proto.
+ */
+export const file_kusinta_iot_webrtc_v1_setpoint_mode = /*@__PURE__*/
+  fileDesc("CilrdXNpbnRhL2lvdC93ZWJydGMvdjEvc2V0cG9pbnRfbW9kZS5wcm90bxIVa3VzaW50YS5pb3Qud2VicnRjLnYxKnEKElNldHBvaW50QWRqdXN0TW9kZRIdChlTRVRQT0lOVF9BREpVU1RfTU9ERV9IRUFUEAASHQoZU0VUUE9JTlRfQURKVVNUX01PREVfQ09PTBABEh0KGVNFVFBPSU5UX0FESlVTVF9NT0RFX0JPVEgQAkICSAFiBnByb3RvMw");
+
+/**
+ * Describes the enum kusinta.iot.webrtc.v1.SetpointAdjustMode.
+ */
+export const SetpointAdjustModeSchema = /*@__PURE__*/
+  enumDesc(file_kusinta_iot_webrtc_v1_setpoint_mode, 0);
+
+/**
+ * SetpointAdjustMode selects which setpoint a thermostat command targets. It is
+ * Matter's SetpointRaiseLowerModeEnum (Thermostat cluster 0x0201) and carries Matter's
+ * own numbering.
+ *
+ * A real type rather than a numbering written down in a comment. The mode field on
+ * ThermostatSetpointParams was a bare uint32 with this numbering stated beside it, so a
+ * consumer carrying forward an older Heat=1/Cool=2/Both=3 convention compiled cleanly and
+ * silently reversed which physical behavior a command produced.
+ *
+ * Zero is a real mode, not a "not set" sentinel — which is why there is no
+ * SETPOINT_ADJUST_MODE_UNSPECIFIED, and why every field carrying this value has explicit
+ * presence: absent = the producer stated no mode, present = the mode it named, Heat
+ * included. This is the same rule properties.proto applies to readings, for the same
+ * reason — a bare proto3 scalar makes "meant Heat" and "never set it" identical on the
+ * wire. Renumbering to free zero is not available: the wire value IS Matter's value.
+ *
+ * SetpointAdjustMode is NOT ThermostatProperties.system_mode. system_mode is Matter's
+ * SystemModeEnum (Off=0, Auto=1, Cool=3, Heat=4), a different enum over a different set
+ * of concepts. Cool is 1 here and 3 there; the two must never be substituted for each
+ * other or read through the same mapping table.
+ *
+ * @generated from enum kusinta.iot.webrtc.v1.SetpointAdjustMode
+ */
+export const SetpointAdjustMode = /*@__PURE__*/
+  tsEnum(SetpointAdjustModeSchema);
+